to confirm that its document management- and archiving solution fulfils all applicable audit criteria for document management solutions

Transcription

1 The certification body of TÜV Informationstechnik GmbH hereby awards this certificate to the company Airbus S.A.S. 1 Rond Point Maurice Bellonte Blagnac, France to confirm that its document management- and archiving solution ZAMIZ LTA3D fulfils all applicable audit criteria for document management solutions pren 9300 series* 1) & AC-DMS, 3 rd edition *1) Applied levels: Verification Level 0 & Validation Level 1 The requirements are summarized in the appendix to the certificate. The appendix is part of the certificate and consists of 10 pages. The certificate is valid only in conjunction with the corresponding evaluation report until EN 9300 AC-DMS DML Certificate-Registration-No.: TUVIT-DML Essen, Dr. Christoph Sutter Head of Certification Body TÜV Informationstechnik GmbH Langemarckstr Essen, Germany AC-DMS is a criteria catalog of VOI

2 Appendix to the certificate TUVIT-DML page 1 of 10 Certification System The certification body of TÜV Informationstechnik GmbH performs its certification on the basis of the following product certification scheme: German document: Zertifizierungsprogramm (nicht akkreditierter Bereich) der Zertifizierungsstelle der TÜV Informationstechnik GmbH, version 1.0 as of , TÜV Informationstechnik GmbH Evaluation Report Evaluation report document management solution (DMS) ZAMIZ & ZAMIZ LTA3D of Airbus S.A.S., version 1.0 as of , TÜV Informationstechnik GmbH Evaluation Requirements AC-DMS Audit Criteria for Document Management and Enterprise Content Management Solutions, 3rd edition 2008, Verband Organisations- und Informationssysteme e. V. (VOI), (corresponds to the German issue PK-DML, 3rd edition 2008) pren Aerospace series LOTAR LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data Part 002: Requirements, 01 May 2012, ASD-STAN pren Aeorspace series LOTAR, LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data Part 100: Common concepts for Long term archiving and retrieval of CAD 3D mechanical information, 01 May 2012, ASD-STAN pren Aeorspace series LOTAR, LOng Term Archiving and Retrieval of digital technical product

3 Appendix to the certificate TUVIT-DML page 2 of 10 documentation such as 3D, CAD and PDM data Part 110: CAD mechanical 3D Explicit geometry information, 01 May 2012, ASD-STAN pren Aeorspace series LOTAR, LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data Part 115: Explicit CAD assembly structure, 01 May 2012, ASD-STAN pren Aeorspace series LOTAR, LOng Term Archiving and Retrieval of digital technical product documentation such as 3D, CAD and PDM data Part 120: CAD 3D Explicit Geometry with Product and Manufacturing Information, (currently in release process), ASD-STAN The evaluation requirements are listed at the end. Not applicable requirements are printed in grey. Evaluation Target Evaluation Target is the Document Management Solution ZAMIZ LTA3D based on Documentation: Procedural Documentation ZAMIZ/LTA3D, Version 1.4 as of , Airbus Deutschland GmbH Basic Module for the Procedure Documentations ZAMIZ Archiving using ImageMaster, Version 6.6, T-Systems International GmbH Systems in Operation: ZAMIZ-IMA, ImageMaster Evaluation Result All applicable AC-DMS and pren , -100, -110, 115 and -120 evaluation requirements for Verification Level 0 & Validation Level 1 are fulfilled

4 Appendix to the certificate TUVIT-DML page 3 of 10 The constraints and recommendations of the evaluation report have to be regarded. Summary of the Evaluation Requirement AC-DMS: Requirements 1 General description of area of use 1.1 Description of the organization 1.2 Location 1.3 Structural organization 1.4 Process organization 2 Logical system solution 2.1 Framework, tasks and guidelines 2.2 Description of organization 2.3 Document inventories 2.4 Processing rules 2.5 Destruction of paper and other original documents 2.6 Takeover of documents received in electronic form 2.7 Handling of s 2.8 Electronic signatures 3 Technical system solution and migration 3.1 Storage systems 3.2 Recording systems 3.3 Output systems 3.4 Server hardware 3.5 Client hardware 3.6 Graphic representation of system 3.7 Server software 3.8 Client software 3.9 Special case: individual software 3.10 Interfaces 3.11 Network system description 3.12 Electronic signatures 3.13 Long-term availability and migration capacity

5 Appendix to the certificate TUVIT-DML page 4 of 10 4 IT Security 4.1 General security concept 4.2 DMS-specific additions to the security concept 4.3 Backup concept 4.4 User administration and authorization concept 4.5 Access, entry and data access controls 4.6 Transaction, integrity and consistency security 4.7 Recording (protocols) 4.8 Security against failure 4.9 Data protection and control measures 5 Technical operation 5.1 Responsibilities 5.2 Prerequisites with respect to buildings 5.3 Operating conditions for hardware 5.4 Operating conditions for software 5.5 Data security 5.6 Handling of data carriers 5.7 Monitoring of orderly operation 5.8 Responsibility for maintenance and rectification of faults and disturbances 5.9 Preventive maintenance 5.10 Documentation of the maintenance processes 5.11 Rectification of faults and disturbances 5.12 Restart 5.13 Recovery 5.14 Updating of the hardware 5.15 Updating of the software 6 Processes 6.1 Digitization and takeover of paper documents 6.2 Destruction of paper originals following digitization 6.3 Original digital documents - takeover procedure 6.4 documents - takeover procedure 6.5 Takeover procedure for mass digital data 6.6 Takeover and checking of electronically signed documents

6 Appendix to the certificate TUVIT-DML page 5 of Indexing 6.8 Archiving 6.9 Search and access 6.10 Check-in / Check-out 6.11 Processing and assigning versions 6.12 Onward transfer 6.13 Reproduction 6.14 Deletion 6.15 Process documentation 6.16 Continuation of the Internal Control System (ICS) 6.17 Control and evaluation of the ICS 7 Employee qualification 7.1 Roles 7.2 Necessary knowledge 7.3 Responsibilities 7.4 Qualification measures 7.5 Documentation of the qualifications and measures 8 Tests 8.1 Test concept 8.2 Test plans and test rules and regulations 8.3 Test protocols 9 Outsourcing 9.1 Performance and responsibility 9.2 Process documentation 9.3 Interfaces 9.4 Control 10 Internal control system (ICS) 10.1 Documentation of the organizational security measures 10.2 Documentation of the technical protection measures 10.3 Documentation of current changes 10.4 Revision of the ICS 10.5 Assignment of responsibilities

7 Appendix to the certificate TUVIT-DML page 6 of 10 pren : Requirements 1 General Requirements 1.1 System preparation 1.2 Identification of preservation use cases 1.3 Categorization of digital product data to archive 1.4 Specification of the descriptive information of the SIP 1.5 Description of the quality control criteria 1.6 Description of the derivation procedures for the SIP 2 Data Preparation 2.1 Preparation of the descriptive information associated to each source product information 2.2 Preparation of the verification information for each SIP 2.3 Preparation of the validation information associated to each source product information 3 Ingest 3.1 Approval prior to release 3.2 Error detection methods 3.3 Translation audit 3.4 Content modifications and updates 3.5 Proprietary rights 4 Archive Storage 4.1 Notification of storage requests 4.2 Operational statistics 4.3 Archive maintenance 4.4 Error checking 4.5 Auditing requirements 4.6 Auditing for data integrity errors 4.7 Representative sampling 4.8 Corrective action plans 4.9 Audit reporting 4.10 Documented testing procedures 4.11 Disaster recovery 4.12 Media context discrepancies

8 Appendix to the certificate TUVIT-DML page 7 of 10 5 Data Management 5.1 Data security 5.2 Authentication 5.3 Privilege 5.4 Traceability 5.5 Activity Log 5.6 Repository security structure 5.7 Failsafe procedures 5.8 Access and distribution restrictions 5.9 Data content 5.10 File formats / application association 5.11 Multiple file formats of same design 5.12 Variety of types of data objects 5.13 Unique persistent identifier or identification scheme 5.14 Relationships between data objects 5.15 Capture derivative relationships between part designs 5.16 Capture standards metadata 5.17 Unambiguous product definition 5.18 Extensibility 5.19 Links with documents of existing archive systems 5.20 Associated non-product data 5.21 Data integrity 5.22 Description of key performance indicators 5.23 Stored media error detection 5.24 Media refresh 5.25 Design intent integrity 5.26 Storage and retrieval integrity 5.27 Integrity of the data over the entire product / data life cycle 5.28 Migration or conversion of data representations 5.29 Multi-level architecture 5.30 Audit trail 5.31 Provenance 5.32 Usability after translation

9 Appendix to the certificate TUVIT-DML page 8 of Description of format and representation 5.34 Core attributes 5.35 Management of descriptive information 6 Administration 6.1 Negotiation of agreements between the producer and the archive 6.2 Configuration management system 6.3 Regulatory and contractual requirements 6.4 Coordination with regulatory agencies 6.5 Contractual requirements 7 Preservation Planning 7.1 Risk management 7.2 Data recovery contingency plan 7.3 Data preservation with external producers 7.4 Inherited product data 7.5 Plan for technology evolution 7.6 Usability planning 7.7 Periodic assessment 7.8 Technology replacement 7.9 Access service presentation 7.10 Minimum access requirements 7.11 Incorporate recommendations 8 Access 8.1 Data retrieval and navigation 8.2 Data retrieval 8.3 Retrieval and navigation maintenance 8.4 Interrogation 8.5 Translation accuracy 8.6 Verification 8.7 Validation properties 8.8 Error detection 8.9 Usability issues 8.10 Proprietary rights identification

10 Appendix to the certificate TUVIT-DML page 9 of 10 pren : CAD 3D Mechanical 1.1 Long term archiving and retrieval of CAD as part of the company risk management 1, CAD reference model for long term archiving of design intent 1.3 Qualification methods for long term preservation of archived CAD information 1.4 Specific qualification processes for long term archiving of CAD models and associated tolerance thresholds 1.5 Categorization of CAD archived files according to a risk management analysis 1, 2, Repair in case of identification of errors after retrieval 1, Preservation planning of archived CAD information 1.8 Evolution of ISO standards of the related relevant recommended practices 1.9 Administration and monitoring 1.10 Preservation description information 1, 2, 3, 4, 5, 6 pren : Explicit Geometry Information 1.1 Definition of core model for an explicit geometry 1.2 Verification rules of explicit geometry 1.3 Level of verification 1, Verification rules 1.5 Evaluation of the values of thresholds 1, 2, Results of the verification 1, Verification reports 1.8 Level of validation 1, Comparison of the geometrical validation properties 1, 2, Results of the validation 1, 2, 3 pren : Explicit CAD Assembly Structure 1.1 Verification rules of CAD explicit assembly structure 1.2 Validation rules of CAD explicit assembly structure 1.3 Identification of the validation level in AIP 1.4 Identification of the validation level in DIP

11 Appendix to the certificate TUVIT-DML page 10 of 10 pren : CAD 3D Explicit Geometry with Product and Manufacturing Information 1.1 Saved views 1, 2, Definition of core model for PMI 1.3 Verification rules for PMI 1.4 Validation rules GD&T and annotation 1.5 Levels of validation 1, Comparison of the PMI validation properties (PMIVP) 1, Results of the validation at the ingest process (qualify) 1.8 Results of the validation at the retrieval process (comparison) 1.9 Validation reports